WEBSITE ANALYSIS REPORT
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=78ce50cb-54eb-42b2-9e79-9c71b0309da7&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=aS5zY2FuZG9sYXJhQG9jcmltLmNvbQ==
public
Phishing detected
Review evidence →5 detections · review the detection signals
Host summary
Observed host history, traffic, and infrastructure
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| login.live.com | 179 | 1994-12-28 | 2012-05-21 | 2026-04-15 | 977 B | 4.9 KB |  20.190.177.149 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| solarworldbotswana.co.bw 2 alerts | N/A | 2023-08-14 | 2026-04-09 | 2026-04-20 | 1.3 KB | 3.1 KB |  192.250.227.228 | LiteSpeed Web servers LiteSpeed is a high-scalability web server. |
| autologon.microsoftazuread-sso.com | 5151 | 2016-07-22 | 2017-01-30 | 2026-04-16 | 647 B | 21.3 KB | 20.190.147.3 | jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-04-20 | 3.9 KB | 30.1 KB | 20.190.177.148 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-04-20 | 525 B | 147.6 KB | 2.22.225.32 | |
| aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-04-15 | 5.9 KB | 1.39 MB | 13.107.246.53 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| conscince.sosinskiglobal.ru 21 alerts | N/A | N/A | N/A | N/A | 8.0 KB | 106.3 KB | 137.184.30.104 | |
| portal.microsoftonline.com | 222862 | 2002-07-09 | 2014-01-23 | 2026-04-18 | 562 B | 1.8 KB | 150.171.74.13 | |
| aadcdn.msauthimages.net | 24430 | 2018-11-12 | 2019-08-14 | 2026-04-15 | 552 B | 7.8 KB | 2.22.225.34 |
Observed certificates
Distinct fingerprints recorded in HTTP transactions
| Subject | Issuer | Valid from | Valid until | Fingerprint | Hosts |
|---|---|---|---|---|---|
| aadcdn.msauth.net | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 04 | Fri, 06 Mar 2026 19:39:46 GMT | Wed, 02 Sep 2026 19:39:46 GMT | SHA2569C:1A:83:B2:23:49:7D:D8:8A:D4:AE:F6:D2:F6:A4:AB:35:F3:21:16:30:7F:01:51:68:8C:F6:B3:04:EA:91:B0 | aadcdn.msauth.net |
| login.live.com | DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Fri, 03 Apr 2026 00:00:00 GMT | Wed, 30 Sep 2026 23:59:59 GMT | SHA256D4:88:C7:48:A2:7F:DC:0C:CA:09:00:78:BA:A9:80:77:21:FD:B5:BD:94:D2:B5:F5:35:FE:4D:7D:5B:F1:E2:5A | login.live.com |
| webmail.solarworldbotswana.co.bw | Let's Encrypt · R13 | Mon, 09 Mar 2026 01:15:14 GMT | Sun, 07 Jun 2026 01:15:13 GMT | SHA25645:0F:74:3F:27:26:D8:C0:AD:1D:7D:B0:0C:C3:FD:D7:DA:79:2E:A4:19:40:B8:2A:36:79:9B:35:FB:E2:F8:A5 | solarworldbotswana.co.bw |
| autologon.microsoftazuread-sso.com | DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Thu, 26 Mar 2026 00:00:00 GMT | Tue, 22 Sep 2026 23:59:59 GMT | SHA2565A:D5:BE:59:6C:D4:DA:80:A7:AF:B6:9D:30:0B:A1:21:6D:F4:20:70:A5:0B:95:A3:6E:FA:AD:D6:25:FA:05:33 | autologon.microsoftazuread-sso.com |
| sosinskiglobal.ru | Let's Encrypt · R13 | Mon, 20 Apr 2026 17:15:15 GMT | Sun, 19 Jul 2026 17:15:14 GMT | SHA256FD:B5:E4:15:BE:DC:96:FD:5F:48:56:0A:FE:7C:41:41:94:B0:0E:97:E2:50:DF:F1:11:48:0E:99:C8:1F:21:01 | conscince.sosinskiglobal.ru |
| stamp2.login.microsoftonline.com | DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Sat, 18 Apr 2026 00:00:00 GMT | Thu, 15 Oct 2026 23:59:59 GMT | SHA256F9:52:25:BD:8F:18:FF:3B:D6:95:AE:AF:92:FB:07:48:BA:AD:8C:90:06:AF:30:4F:2F:59:2A:AC:C7:FC:7F:54 | login.microsoftonline.com |
| portal.office.com | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 04 | Wed, 28 Jan 2026 23:47:09 GMT | Mon, 27 Jul 2026 23:47:09 GMT | SHA2566A:59:D6:C2:63:15:70:46:19:89:62:BB:5B:E8:D7:DD:8D:D0:A7:2F:A9:39:A1:FA:B6:54:1F:9E:E3:54:19:9A | portal.microsoftonline.com |
| idnaakamaicdn.msftauth.net | Microsoft Corporation · Microsoft TLS G2 ECC CA OCSP 02 | Tue, 10 Feb 2026 18:29:15 GMT | Fri, 05 Feb 2027 18:29:15 GMT | SHA25626:06:65:FC:25:8B:05:0E:C1:76:C6:E2:3C:FF:76:A2:A3:52:4E:8D:FC:2D:48:D0:74:7E:6E:33:DA:49:4A:3D | aadcdn.msftauth.net aadcdn.msauthimages.net |